All pastes #1470974 Raw Edit

gmer2.log

public text v1 · immutable
#1470974 ·published 2009-06-23 11:02 UTC
rendered paste body
GMER 1.0.15.14972 - http://www.gmer.net
Rootkit scan 2009-06-23 19:06:41
Windows 6.0.6001 Service Pack 1


---- System - GMER 1.0.15 ----

SSDT            85943140                                                                                                                                                                                                                                                         ZwAlertResumeThread
SSDT            8593D068                                                                                                                                                                                                                                                         ZwAlertThread
SSDT            85961D10                                                                                                                                                                                                                                                         ZwAllocateVirtualMemory
SSDT            858E4880                                                                                                                                                                                                                                                         ZwAlpcConnectPort
SSDT            859D7128                                                                                                                                                                                                                                                         ZwAssignProcessToJobObject
SSDT            859EFA40                                                                                                                                                                                                                                                         ZwCreateMutant
SSDT            859F4290                                                                                                                                                                                                                                                         ZwCreateSymbolicLinkObject
SSDT            8593C420                                                                                                                                                                                                                                                         ZwCreateThread
SSDT            859D6118                                                                                                                                                                                                                                                         ZwDebugActiveProcess
SSDT            85960170                                                                                                                                                                                                                                                         ZwDuplicateObject
SSDT            85961670                                                                                                                                                                                                                                                         ZwFreeVirtualMemory
SSDT            859448C0                                                                                                                                                                                                                                                         ZwImpersonateAnonymousToken
SSDT            85947100                                                                                                                                                                                                                                                         ZwImpersonateThread
SSDT            858E4808                                                                                                                                                                                                                                                         ZwLoadDriver
SSDT            85961550                                                                                                                                                                                                                                                         ZwMapViewOfSection
SSDT            85942688                                                                                                                                                                                                                                                         ZwOpenEvent
SSDT            859603D0                                                                                                                                                                                                                                                         ZwOpenProcess
SSDT            8B901BB0                                                                                                                                                                                                                                                         ZwOpenProcessToken
SSDT            859D5DF0                                                                                                                                                                                                                                                         ZwOpenSection
SSDT            85960280                                                                                                                                                                                                                                                         ZwOpenThread
SSDT            859F4D80                                                                                                                                                                                                                                                         ZwProtectVirtualMemory
SSDT            858C5860                                                                                                                                                                                                                                                         ZwResumeThread
SSDT            858C2888                                                                                                                                                                                                                                                         ZwSetContextThread
SSDT            859612F8                                                                                                                                                                                                                                                         ZwSetInformationProcess
SSDT            859D5180                                                                                                                                                                                                                                                         ZwSetSystemInformation
SSDT            859B9208                                                                                                                                                                                                                                                         ZwSuspendProcess
SSDT            85943E60                                                                                                                                                                                                                                                         ZwSuspendThread
SSDT            859D3018                                                                                                                                                                                                                                                         ZwTerminateProcess
SSDT            858D8110                                                                                                                                                                                                                                                         ZwTerminateThread
SSDT            858C1118                                                                                                                                                                                                                                                         ZwUnmapViewOfSection
SSDT            859619C0                                                                                                                                                                                                                                                         ZwWriteVirtualMemory
SSDT            859F46A0                                                                                                                                                                                                                                                         ZwCreateThreadEx

Code            857A4138                                                                                                                                                                                                                                                         ZwEnumerateKey
Code            855AA3A0                                                                                                                                                                                                                                                         ZwFlushInstructionCache
Code            8583A315                                                                                                                                                                                                                                                         IofCallDriver
Code            852803BE                                                                                                                                                                                                                                                         IofCompleteRequest

---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!IofCompleteRequest                                                                                                                                                                                                                                  82087FE2 5 Bytes  JMP 852803C3 
.text           ntkrnlpa.exe!KeSetTimerEx + 350                                                                                                                                                                                                                                  82106914 8 Bytes  [40, 31, 94, 85, 68, D0, 93, ...] {INC EAX; XOR [EBP+EAX*4-0x7a6c2f98], EDX}
.text           ntkrnlpa.exe!KeSetTimerEx + 364                                                                                                                                                                                                                                  82106928 4 Bytes  [10, 1D, 96, 85]
.text           ntkrnlpa.exe!KeSetTimerEx + 370                                                                                                                                                                                                                                  82106934 4 Bytes  [80, 48, 8E, 85] {OR BYTE [EAX-0x72], 0x85}
.text           ntkrnlpa.exe!KeSetTimerEx + 3C4                                                                                                                                                                                                                                  82106988 4 Bytes  [28, 71, 9D, 85]
.text           ntkrnlpa.exe!KeSetTimerEx + 428                                                                                                                                                                                                                                  821069EC 4 Bytes  [40, FA, 9E, 85]
.text           ...                                                                                                                                                                                                                                                              
.text           ntkrnlpa.exe!IofCallDriver                                                                                                                                                                                                                                       82109F6F 5 Bytes  JMP 8583A31A 
PAGE            ntkrnlpa.exe!ZwFlushInstructionCache                                                                                                                                                                                                                             8220030B 5 Bytes  JMP 855AA3A4 
PAGE            ntkrnlpa.exe!ZwEnumerateKey                                                                                                                                                                                                                                      82255BA2 5 Bytes  JMP 857A413C 

---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!SetWindowsHookExW                                                                                                                                                                               75E27B69 5 Bytes  JMP 6DCE9271 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!CallNextHookEx                                                                                                                                                                                  75E28C33 5 Bytes  JMP 6DCDC8B9 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!GetAsyncKeyState                                                                                                                                                                                75E28DF4 5 Bytes  JMP 6DC08E62 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!DialogBoxIndirectParamW                                                                                                                                                                         75E2BD25 5 Bytes  JMP 6DE0B6FB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!SendInput                                                                                                                                                                                       75E2BEE7 5 Bytes  JMP 6DE0C703 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!EndDialog                                                                                                                                                                                       75E2C178 5 Bytes  JMP 6DC17B8E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!EnableWindow                                                                                                                                                                                    75E2DC79 5 Bytes  JMP 6DCED4ED C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!CreateWindowExW                                                                                                                                                                                 75E33D67 5 Bytes  JMP 6DCED2D4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!GetKeyState                                                                                                                                                                                     75E387C7 5 Bytes  JMP 6DCECA9B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!IsDialogMessageW                                                                                                                                                                                75E399AE 5 Bytes  JMP 6DC156E7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!CreateDialogParamA                                                                                                                                                                              75E416FD 5 Bytes  JMP 6DE0C018 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!IsDialogMessage                                                                                                                                                                                 75E4179A 5 Bytes  JMP 6DE0BA1F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!DialogBoxParamW                                                                                                                                                                                 75E41FD5 5 Bytes  JMP 6DC151D5 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!CreateDialogIndirectParamA                                                                                                                                                                      75E427CD 5 Bytes  JMP 6DE0C04F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!CreateDialogIndirectParamW                                                                                                                                                                      75E49AFA 5 Bytes  JMP 6DE0C086 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!UnhookWindowsHookEx                                                                                                                                                                             75E508BE 5 Bytes  JMP 6DC54284 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!CreateDialogParamW                                                                                                                                                                              75E51C58 5 Bytes  JMP 6DCED660 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!SetKeyboardState                                                                                                                                                                                75E51ECE 5 Bytes  JMP 6DE0BD8E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!DialogBoxParamA                                                                                                                                                                                 75E680B2 5 Bytes  JMP 6DE0B698 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!DialogBoxIndirectParamA                                                                                                                                                                         75E683DD 5 Bytes  JMP 6DE0B75E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!MessageBoxIndirectA                                                                                                                                                                             75E7D471 5 Bytes  JMP 6DE0B62D C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!MessageBoxIndirectW                                                                                                                                                                             75E7D56B 5 Bytes  JMP 6DE0B5C2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!MessageBoxExA                                                                                                                                                                                   75E7D5D1 5 Bytes  JMP 6DE0B560 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!MessageBoxExW                                                                                                                                                                                   75E7D5F5 5 Bytes  JMP 6DE0B4FE C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] USER32.dll!keybd_event                                                                                                                                                                                     75E7D93C 5 Bytes  JMP 6DE0C92F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] SHELL32.dll!SHRestricted + DFD                                                                                                                                                                             76508390 4 Bytes  [5D, 30, 0B, 71]
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] SHELL32.dll!SHRestricted + E05                                                                                                                                                                             76508398 8 Bytes  [67, 2F, 0B, 71, 49, 5C, 0A, ...]
.text           C:\Program Files\Internet Explorer\iexplore.exe[2304] ole32.dll!CoCreateInstance                                                                                                                                                                                 771EE188 5 Bytes  JMP 6DCED330 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!DialogBoxIndirectParamW                                                                                                                                                                         75E2BD25 5 Bytes  JMP 6DE0B6FB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!CreateWindowExW                                                                                                                                                                                 75E33D67 5 Bytes  JMP 6DCED2D4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!DialogBoxParamW                                                                                                                                                                                 75E41FD5 5 Bytes  JMP 6DC151D5 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!DialogBoxParamA                                                                                                                                                                                 75E680B2 5 Bytes  JMP 6DE0B698 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!DialogBoxIndirectParamA                                                                                                                                                                         75E683DD 5 Bytes  JMP 6DE0B75E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!MessageBoxIndirectA                                                                                                                                                                             75E7D471 5 Bytes  JMP 6DE0B62D C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!MessageBoxIndirectW                                                                                                                                                                             75E7D56B 5 Bytes  JMP 6DE0B5C2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!MessageBoxExA                                                                                                                                                                                   75E7D5D1 5 Bytes  JMP 6DE0B560 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\Internet Explorer\iexplore.exe[5664] USER32.dll!MessageBoxExW                                                                                                                                                                                   75E7D5F5 5 Bytes  JMP 6DE0B4FE C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!GetScrollPos                                                                                                                                                                             75E2C090 5 Bytes  JMP 003122B0 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!GetScrollRange                                                                                                                                                                           75E2C33B 5 Bytes  JMP 003122E0 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!SetScrollRange                                                                                                                                                                           75E2E173 5 Bytes  JMP 003123A0 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!GetSysColorBrush                                                                                                                                                                         75E2EECC 5 Bytes  JMP 00312490 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!GetScrollInfo                                                                                                                                                                            75E30804 7 Bytes  JMP 00312270 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!ShowScrollBar                                                                                                                                                                            75E30E7C 5 Bytes  JMP 003123F0 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!SetScrollInfo                                                                                                                                                                            75E38663 7 Bytes  JMP 00312320 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!GetSysColor                                                                                                                                                                              75E39D02 5 Bytes  JMP 00312430 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!EnableScrollBar                                                                                                                                                                          75E4B11E 7 Bytes  JMP 00312230 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)
.text           C:\Program Files\VIRGIN BROADBAND\VIRGIN BROADBAND.exe[6016] USER32.dll!SetScrollPos                                                                                                                                                                             75E53A1E 5 Bytes  JMP 00312360 C:\Program Files\VIRGIN BROADBAND\SkinMagicU.dll (SkinMagic Toolkit/Appspeed Inc.)

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown]                                                                                                                                                                            [74237BA4] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage]                                                                                                                                                                             [742798C5] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI]                                                                                                                                                                         [7423D3C8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode]                                                                                                                                                                   [7422F527] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup]                                                                                                                                                                             [74237599] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC]                                                                                                                                                                          [7422E43D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM]                                                                                                                                                              [7426B33D] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream]                                                                                                                                                                 [7423D68A] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight]                                                                                                                                                                         [7423012E] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth]                                                                                                                                                                          [74230095] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage]                                                                                                                                                                           [742271F3] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM]                                                                                                                                                                   [742BD802] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile]                                                                                                                                                                      [742575E1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics]                                                                                                                                                                         [7422DAE1] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree]                                                                                                                                                                                   [7422668F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc]                                                                                                                                                                                  [742266BA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Windows\Explorer.EXE[2280] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode]                                                                                                                                                                     [74231E45] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                           [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                             [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW]                                                                                                                                                [710A1B90] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW]                                                                                                                                             [710A0120] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW]                                                                                                                                                  [7109E28D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW]                                                                                                                                                  [710A0A38] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW]                                                                                                                                                [7109EEEA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW]                                                                                                                                             [7109A3EB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW]                                                                                                                                       [710A1DFA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose]                                                                                                                                                  [710A3BB7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW]                                                                                                                                              [710A2A3D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW]                                                                                                                                             [710A3110] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA]                                                                                                                                               [7109FC85] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW]                                                                                                                                                [7109E904] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW]                                                                                                                                 [7109DD00] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW]                                                                                                                                               [7109FE0A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                             [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW]                                                                                                                                   [7109D55C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW]                                                                                                                                           [710AFCAB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW]                                                                                                                                              [710B0615] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW]                                                                                                                                              [710AEC35] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW]                                                                                                                                           [710AF90F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW]                                                                                                                                              [710AF029] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW]                                                                                                                                            [710AE6BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey]                                                                                                                                                [710AEE8D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW]                                                                                                                                              [710A0120] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA]                                                                                                                                                [7109FC85] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW]                                                                                                                                                   [7109E28D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                              [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW]                                                                                                                                                [7109FE0A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW]                                                                                                                                                 [7109E904] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW]                                                                                                                                                 [710A1B90] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW]                                                                                                                                                 [7109EEEA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose]                                                                                                                                                  [710A3BB7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA]                                                                                                                                             [710A2DAD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA]                                                                                                                                              [710A29CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW]                                                                                                                                             [710A3110] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW]                                                                                                                                              [710A2A3D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA]                                                                                                                                         [7109BE1B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA]                                                                                                                                       [710A17E3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA]                                                                                                                                         [7109C071] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA]                                                                                                                                           [710A0FB3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA]                                                                                                                                           [710A158D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA]                                                                                                                                                [7109EDBF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW]                                                                                                                                         [7109BF46] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW]                                                                                                                                       [710A1DFA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW]                                                                                                                                         [7109C19F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW]                                                                                                                                           [710A10E1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW]                                                                                                                                                [7109EEEA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW]                                                                                                                                                  [710A0A38] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW]                                                                                                                                           [710A16B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA]                                                                                                                                                  [710A09C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                             [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA]                                                                                                                                               [7109FC85] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA]                                                                                                                                             [7109A063] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW]                                                                                                                                             [7109A3EB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA]                                                                                                                                                [7109E7BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW]                                                                                                                                                [7109E904] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW]                                                                                                                                               [7109FE0A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW]                                                                                                                                              [7109FE0A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW]                                                                                                                                              [710A0D39] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW]                                                                                                                                [7109DD00] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW]                                                                                                                                  [7109D55C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA]                                                                                                                                  [7109D405] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW]                                                                                                                                               [7109EEEA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW]                                                                                                                                            [710A0120] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW]                                                                                                                                        [7109C19F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW]                                                                                                                                               [7109E904] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW]                                                                                                                                            [710A3110] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW]                                                                                                                                             [710A2A3D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW]                                                                                                                                               [710A1B90] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW]                                                                                                                                        [7109BF46] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA]                                                                                                                                        [7109C071] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA]                                                                                                                                               [7109E7BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA]                                                                                                                                            [710A2DAD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA]                                                                                                                                             [710A29CA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose]                                                                                                                                                 [710A3BB7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA]                                                                                                                                               [710A2449] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA]                                                                                                                                        [7109BE1B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA]                                                                                                                                              [7109FC85] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                            [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW]                                                                                                                                                    [7109FB4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA]                                                                                                                                                    [7109FA17] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey]                                                                                                                                               [710AEE8D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA]                                                                                                                                           [710AE535] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA]                                                                                                                                             [710AEEE0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA]                                                                                                                                          [710AFAAF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA]                                                                                                                                             [710AEABD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW]                                                                                                                                           [710AE6BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW]                                                                                                                                             [710AEC35] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW]                                                                                                                                             [710B0305] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW]                                                                                                                                            [710AF5D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW]                                                                                                                                             [710AF029] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW]                                                                                                                                          [710AFCAB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW]                                                                                                                                          [710AF90F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW]                                                                                                                                             [710B0615] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW]                                                                                                                                               [710B0011] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA]                                                                                                                                             [710B017D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA]                                                                                                                                             [710B048D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA]                                                                                                                                               [710AFEA7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA]                                                                                                                                          [710AF76F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW]                                                                                                                                 [7109D04C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW]                                                                                                                                             [710A2A3D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW]                                                                                                                                              [710A0D39] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW]                                                                                                                            [7109D2CE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW]                                                                                                                               [7109DA7E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW]                                                                                                                                [7109DD00] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW]                                                                                                                                           [7109EC0C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW]                                                                                                                                                 [7109E28D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW]                                                                                                                                            [7109CB4B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW]                                                                                                                                            [710A0120] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW]                                                                                                                                            [7109A3EB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW]                                                                                                                                                 [710A0A38] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW]                                                                                                                                            [710A3110] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose]                                                                                                                                                 [710A3BB7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA]                                                                                                                                         [7109C7AD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA]                                                                                                                                        [7109BE1B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW]                                                                                                                                               [710A1B90] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW]                                                                                                                                     [7109CDC4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW]                                                                                                                                  [7109D55C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW]                                                                                                                                          [710A16B8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW]                                                                                                                                          [710A10E1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW]                                                                                                                                               [7109EEEA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW]                                                                                                                                        [7109C19F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW]                                                                                                                                        [7109BF46] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW]                                                                                                                                               [710A0A5D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW]                                                                                                                                         [7109C8EC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW]                                                                                                                                              [7109FE0A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW]                                                                                                                                               [7109E904] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW]                                                                                                                                      [7109C40C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA]                                                                                                                                              [7109FC85] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW]                                                                                                                                          [7109C67C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW]                                                                                                                                      [710A1DFA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW]                                                                                                                                                  [7109F174] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW]                                                                                                                                                    [7109FB4E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW]                                                                                                                                        [7109F669] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW]                                                                                                                                         [710A66B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW]                                                                                                                                     [710A62E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW]                                                                                                                                      [710A7670] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW]                                                                                                                                             [710A6189] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW]                                                                                                                                          [710A6236] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA]                                                                                                                                               [710A76C2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW]                                                                                                                                               [710A660E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W]                                                                                                                                          [710A7A75] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW]                                                                                                                                           [710A692A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW]                                                                                                                                                 [710A6F20] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA]                                                                                                                                                [710A6BD6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW]                                                                                                                                                [710A6C22] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW]                                                                                                                                           [710A735C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW]                                                                                                                                            [710A67F1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW]                                                                                                                                             [710A72C8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW]                                                                                                                                            [710A70FC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW]                                                                                                                                       [710A8099] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW]                                                                                                                                              [710A7234] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW]                                                                                                                                      [710A69C2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW]                                                                                                                                        [710A6CBD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA]                                                                                                                                           [710A68DE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW]                                                                                                                                        [710A705C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA]                                                                                                                                             [710A6480] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW]                                                                                                                                              [710A8198] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW]                                                                                                                                              [710A85EE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW]                                                                                                                                           [710A8251] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW]                                                                                                                                            [710A7C7F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW]                                                                                                                                             [710A8310] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW]                                                                                                                                         [710A6A5A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW]                                                                                                                                      [710A6E88] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW]                                                                                                                                           [710A6DF0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW]                                                                                                                                    [710A73FA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW]                                                                                                                                      [710A6FB8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW]                                                                                                                                                 [710A6D58] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW]                                                                                                                                            [710A6B8A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW]                                                                                                                                                [710A79C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW]                                                                                                                                             [710A64CF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW]                                                                                                                                             [710A77B2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW]                                                                                                                                                [710A880D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW]                                                                                                                                               [710A7859] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW]                                                                                                                                               [710A790C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW]                                                                                                                                            [710A6756] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW]                                                                                                                                               [710A7711] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                                                                                                                         [7109BBDC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose]                                                                                                                                                   [710A3BB7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW]                                                                                                                                              [710A3110] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW]                                                                                                                                              [710A0120] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW]                                                                                                                                                 [710A1B90] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW]                                                                                                                                              [7109A3EB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW]                                                                                                                                                 [7109EEEA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW]                                                                                                                                           [7109C8EC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW]                                                                                                                                        [7109C40C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW]                                                                                                                                                 [7109E904] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW]                                                                                                                                                [7109FE0A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW]                                                                                                                                          [7109BF46] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA]                                                                                                                                                [7109FC85] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                            [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                            [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW]                                                                                                                                             [710A8310] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA]                                                                                                                                             [710A82B2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA]                                                                                                                                    [710A73A8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA]                                                                                                                                               [710A76C2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW]                                                                                                                                             [710A77B2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW]                                                                                                                                         [710A66B5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA]                                                                                                                                                [710A796A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA]                                                                                                                                                [710A87B2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW]                                                                                                                                                [710A79C5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW]                                                                                                                                                [710A880D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCombineW]                                                                                                                                               [710A660E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                            [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\ws2_32.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                             [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                             [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                           [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]                                                                                                                                            [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT             C:\Program Files\Internet Explorer\iexplore.exe[2304] @ C:\Windows\system32\IPHLPAPI.DLL [KERNEL32.dll!GetProcAddress]                                                                                                                                           [710982E6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\tdx \Device\Tcp                                                                                                                                                                                                                                          SYMTDI.SYS
AttachedDevice  \Driver\tdx \Device\Udp                                                                                                                                                                                                                                          SYMTDI.SYS
AttachedDevice  \Driver\tdx \Device\RawIp                                                                                                                                                                                                                                        SYMTDI.SYS
---- Processes - GMER 1.0.15 ----

Library         \\?\globalroot\systemroot\system32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll (*** hidden *** ) @ C:\Windows\system32\svchost.exe [940]                                                                                                                           0x10000000                                                                                                                                                           

---- Services - GMER 1.0.15 ----

Service         C:\Windows\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys (*** hidden *** )                                                                                                                                                                          [SYSTEM] MSIVXserv.sys                                                                                                                                                <-- ROOTKIT !!!

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys                                                                                                                                                                                                             
Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys@start                                                                                                                                                                                                       1
Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys@type                                                                                                                                                                                                        1
Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys@imagepath                                                                                                                                                                                                   \systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys@group                                                                                                                                                                                                       file system
Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys\modules                                                                                                                                                                                                     
Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys\modules@MSIVXserv                                                                                                                                                                                           \\?\globalroot\systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys\modules@MSIVXl                                                                                                                                                                                              \\?\globalroot\systemroot\system32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll
Reg             HKLM\SYSTEM\CurrentControlSet\Services\MSIVXserv.sys\modules@MSIVXclk                                                                                                                                                                                            \\?\globalroot\systemroot\system32\MSIVXmheihxdumqerxpxxwitkslempgbdtqqs.dll
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys                                                                                                                                                                                                                 
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys@start                                                                                                                                                                                                           1
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys@type                                                                                                                                                                                                            1
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys@imagepath                                                                                                                                                                                                       \systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys@group                                                                                                                                                                                                           file system
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys\modules                                                                                                                                                                                                         
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys\modules@MSIVXserv                                                                                                                                                                                               \\?\globalroot\systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys\modules@MSIVXl                                                                                                                                                                                                  \\?\globalroot\systemroot\system32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll
Reg             HKLM\SYSTEM\ControlSet002\Services\MSIVXserv.sys\modules@MSIVXclk                                                                                                                                                                                                \\?\globalroot\systemroot\system32\MSIVXmheihxdumqerxpxxwitkslempgbdtqqs.dll
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys                                                                                                                                                                                                                 
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys@start                                                                                                                                                                                                           1
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys@type                                                                                                                                                                                                            1
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys@imagepath                                                                                                                                                                                                       \systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys@group                                                                                                                                                                                                           file system
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys\modules                                                                                                                                                                                                         
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys\modules@MSIVXserv                                                                                                                                                                                               \\?\globalroot\systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys\modules@MSIVXl                                                                                                                                                                                                  \\?\globalroot\systemroot\system32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll
Reg             HKLM\SYSTEM\ControlSet003\Services\MSIVXserv.sys\modules@MSIVXclk                                                                                                                                                                                                \\?\globalroot\systemroot\system32\MSIVXmheihxdumqerxpxxwitkslempgbdtqqs.dll
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys                                                                                                                                                                                                                 
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys@start                                                                                                                                                                                                           1
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys@type                                                                                                                                                                                                            1
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys@imagepath                                                                                                                                                                                                       \systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys@group                                                                                                                                                                                                           file system
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys\modules                                                                                                                                                                                                         
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys\modules@MSIVXserv                                                                                                                                                                                               \\?\globalroot\systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys\modules@MSIVXl                                                                                                                                                                                                  \\?\globalroot\systemroot\system32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll
Reg             HKLM\SYSTEM\ControlSet004\Services\MSIVXserv.sys\modules@MSIVXclk                                                                                                                                                                                                \\?\globalroot\systemroot\system32\MSIVXmheihxdumqerxpxxwitkslempgbdtqqs.dll
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys                                                                                                                                                                                                                 
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys@start                                                                                                                                                                                                           1
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys@type                                                                                                                                                                                                            1
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys@imagepath                                                                                                                                                                                                       \systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys@group                                                                                                                                                                                                           file system
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys\modules                                                                                                                                                                                                         
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys\modules@MSIVXserv                                                                                                                                                                                               \\?\globalroot\systemroot\system32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys\modules@MSIVXl                                                                                                                                                                                                  \\?\globalroot\systemroot\system32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll
Reg             HKLM\SYSTEM\ControlSet005\Services\MSIVXserv.sys\modules@MSIVXclk                                                                                                                                                                                                \\?\globalroot\systemroot\system32\MSIVXmheihxdumqerxpxxwitkslempgbdtqqs.dll
Reg             HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\jaxsta\Music\Torrent\Cucusoft RMVB DivX-AVI to DVD-VCD-SVCD Converter Pro 7.07 [FULL] by-JU\xa7TiN\Cucusoft Converter Pro 7.07 Pro by-JU\xa7TiN.exe  1

---- Files - GMER 1.0.15 ----

File            C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Lue\Logs\TempLog.Lue                                                                                                                                                                         8192 bytes
File            C:\Windows\System32\drivers\MSIVXrtpwcsfiwcsifustuxrqpomqjckeqbvs.sys                                                                                                                                                                                            80384 bytes executable                                                                                                                                                <-- ROOTKIT !!!
File            C:\Windows\System32\MSIVXcount                                                                                                                                                                                                                                   4 bytes
File            C:\Windows\System32\MSIVXmheihxdumqerxpxxwitkslempgbdtqqs.dll                                                                                                                                                                                                    52224 bytes
File            C:\Windows\System32\MSIVXomejftkivbdnwxibopvebrunciupuxdm.dll                                                                                                                                                                                                    28672 bytes executable

---- EOF - GMER 1.0.15 ----